Forums / KB/RockSolid Knowledge Base/RockSolid Agent

Granting non-administrator Rights to the RockSolidAgent

RockSolid Admin
posted this on August 16, 2010 18:02

This topic covers how to grant rights for RockSolid to capture disk capacity and file system details without granting administrators any rights locally to the instance being monitored

Process

DCOM permission for accessing WMI remotely

  1. Open Dcomcnfg
  2. Expand Component Service -> Computers -> My computer
  3. Go to the properties of My Computer Select the COM Security Tab Click on "Edit Limits" under launch and activation permissions
  4. Add the RockSolidAgent service account and enable the "Remote Activation" permission.

If we don’t give the DCOM permission to the user will get "Access Denied" with Error Code: 0x80070005

Permission for accessing the WMI namespace

  1. Open WMImgmt.msc
  2. Go to the Properties of WMI Control
  3. Go to the Security Tab
    WMIRoot.png
  4. Select "Root" and open security
  5. Add the RockSolidAgent service account and assign the following rights for the service account.
  • Execute Methods
  • Provider Write
  • Enable Account
  • Remote Enable
  1. Navigate to the CIMV2 Namespace found under “Root” and assign the above rights to CIMV2 also.

If we don’t give the WMI permission to the user we will get "Access Denied" with Error Code: 0x80041003

Permission for accessing the Individual Disks

  1. On each of the server disks under My Computer, right click and select Properties
  2. On the Security Tab and the RockSolidAgent service account and assign it READ permission for the root of the disk.  This enables the RockSolidAgent service to view the disk properties.

DiskSecurity.png